$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa File: cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa (raw, json) Hash identifier: HZdZAuHYqjV4C9sKro3RaVePug3gW2sY0jlH6kOQxOI= Subject key identifier: 3A:3F:4C:15:14:64:8D:4B:BD:95:12:15:61:96:26:EB:97:FE:CE:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FBAA131AF929D991207F97480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 7342 IP address blocks: 2620:74:7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:31:af:92:9d:99:12:07:f9:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=5ff9f3b9-e894-464b-9b69-04ee2de164fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:32:71:25:1a:1d:3c:46:da:7c:c8:b2:a0: 62:1d:90:81:1e:a6:cc:9f:9d:82:ab:e2:96:19:ac: 77:ee:c0:b3:3a:34:09:51:9d:c4:75:ce:ae:ae:83: 8d:7e:b2:ef:12:a5:68:f7:27:a0:b6:b1:a1:9f:9e: 01:2e:de:95:a3:e9:c5:28:f6:c9:a2:9c:12:da:5b: 79:ac:23:eb:38:39:9c:b4:4d:50:ba:11:8f:11:20: 9e:2a:b9:6c:aa:82:19:24:2a:ee:d4:a5:8c:7f:65: 7a:ce:bd:f2:cc:c2:dc:c8:4d:cf:37:eb:ea:c0:e9: e4:13:3e:4a:27:38:67:a5:d0:81:ee:39:3f:97:f3: f2:19:d8:9e:85:a7:1f:70:49:f1:f1:14:54:7b:a9: 5a:ae:4e:c6:45:40:b5:ba:c0:28:e7:cb:75:3c:aa: ac:c8:7f:f8:ae:de:c3:3f:bf:cf:a4:1d:03:4e:c5: d4:1a:97:b7:48:a6:d2:a5:74:7a:58:e0:91:c6:5d: 57:f2:99:cd:d9:9b:2b:2f:7c:74:dd:10:af:b3:d5: b5:39:2a:63:80:3a:89:40:77:da:cb:f2:36:6b:35: 2f:74:77:85:b2:14:90:86:2d:57:8a:d1:ca:a4:44: 06:6a:8d:35:19:37:26:fc:2a:c8:5f:c0:f3:b3:c5: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3F:4C:15:14:64:8D:4B:BD:95:12:15:61:96:26:EB:97:FE:CE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1b:23:7a:04:f7:bb:9a:a6:4f:87:19:08:29:6a:41:2f:cb: eb:08:21:6c:c3:39:89:1d:2a:7d:6d:d0:b7:5c:7b:6d:21:14: 8d:92:0e:f2:7c:4b:41:21:de:b5:fa:ae:db:a6:75:90:87:58: 01:99:23:d7:a0:f1:bf:81:ae:d3:e5:a7:0d:86:71:b9:5c:b3: 0b:c6:96:e2:36:fb:4e:0e:38:8d:44:aa:9d:97:97:4d:59:ee: c8:91:c3:3a:fe:b0:d1:79:ac:fd:13:ab:46:fd:ce:1a:ac:3e: e7:a6:7f:c3:2c:a8:69:10:80:27:a4:44:63:08:6a:f2:ab:33: 9e:7a:ac:a8:55:a6:e8:e6:3a:18:37:80:9a:54:eb:4d:04:16: d1:d1:92:f7:6a:39:43:65:f2:4d:7e:50:e8:77:d2:d4:01:8f: 01:47:1d:fd:32:58:14:52:05:92:c6:97:dd:fe:3e:ee:8e:94: 30:29:81:5e:39:d2:06:69:73:51:f6:58:32:5c:ad:3c:b7:69: 4d:4d:08:4b:df:ec:1c:d4:0a:e5:5e:c2:af:e0:ce:c0:65:9a: 2b:64:02:0d:3d:31:3d:f1:4a:c1:ca:10:43:52:c9:03:1c:26: dc:f8:0e:7f:c0:c0:4b:65:3d:6d:d2:40:ec:81:b0:9c:34:10: c4:94:2e:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+6oTGvkp2ZEgf5dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk NWZmOWYzYjktZTg5NC00NjRiLTliNjktMDRlZTJkZTE2NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIYycSUaHTxG2nzIsqBiHZCBHqbMn52Cq+KW Gax37sCzOjQJUZ3Edc6uroONfrLvEqVo9yegtrGhn54BLt6Vo+nFKPbJopwS2lt5 rCPrODmctE1QuhGPESCeKrlsqoIZJCru1KWMf2V6zr3yzMLcyE3PN+vqwOnkEz5K JzhnpdCB7jk/l/PyGdiehacfcEnx8RRUe6lark7GRUC1usAo58t1PKqsyH/4rt7D P7/PpB0DTsXUGpe3SKbSpXR6WOCRxl1X8pnN2ZsrL3x03RCvs9W1OSpjgDqJQHfa y/I2azUvdHeFshSQhi1XitHKpEQGao01GTcm/CrIX8Dzs8WhQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDo/TBUUZI1LvZUSFWGWJuuX/s5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1ZjcxNDAtMDc4NC0z N2U3LWFmYmQtNmYyNGJiNWNjYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAEbI3oE97uapk+HGQgpakEvy+sIIWzDOYkdKn1t0Ldce20hFI2S DvJ8S0Eh3rX6rtumdZCHWAGZI9eg8b+BrtPlpw2GcblcswvGluI2+04OOI1Eqp2X l01Z7siRwzr+sNF5rP0Tq0b9zhqsPuemf8MsqGkQgCekRGMIavKrM556rKhVpujm Ohg3gJpU600EFtHRkvdqOUNl8k1+UOh30tQBjwFHHf0yWBRSBZLGl93+Pu6OlDAp gV450gZpc1H2WDJcrTy3aU1NCEvf7BzUCuVewq/gzsBlmitkAg09MT3xSsHKEENS yQMcJtz4Dn/AwEtlPW3SQOyBsJw0EMSULq0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:45 2026 by rpki-client